Senior Cloud Security Engineer - Remote

Merck; Dover (DE); Remote; USD 142,000 - 224,000; Full time

Benefits offered by this job

Medical benefits

Dental & vision

401(k)

Paid holidays

Job summary

Merck is seeking a Cloud Security Engineer to design, implement, and automate security controls across enterprise cloud environments. You will partner with Cloud, Application, DevOps, and Security teams to ensure cloud services are deployed securely and consistently.

The role focuses on securing IAM, networking, workloads, data, containers, and APIs across AWS, Azure, and GCP, with IaC and policy-as-code guardrails, and CI/CD integration. Strong collaboration and communication are essential.

Qualifications

• Bachelors degree required.
• 8+ years AWS/Azure/GCP security experience.
• Hands-on IAM, networking, encryption, secrets management and workload security.
• Infrastructure as Code experience.
• Git, CI/CD, Python, PowerShell or Bash automation experience.
• Understanding of Kubernetes and container security.
• Familiarity with Wiz or AWS Security Hub.

Responsibilities

• Design and implement security controls across AWS, Azure and/or GCP.
• Secure cloud identity, networking, workloads, data, containers and APIs.
• Build guardrails using IaC and policy-as-code.
• Integrate security into CI/CD pipelines and deployment processes.
• Identify and remediate misconfigurations, vulnerabilities, excessive permissions and attack paths.
• Support cloud security monitoring, logging, threat detection and incident response.
• Partner with engineering teams for security guidance and architecture reviews.

Skills

Cloud architecture

IAM & networking

IaC

Git & CI/CD

Python scripting

Kubernetes security

Security tooling

Zero Trust

Education

Bachelor's degree

Tools

Terraform

Git

Job description

Merck is seeking a Cloud Security Engineer to design, implement, and automate security controls across enterprise cloud environments. You will partner with Cloud, Application, DevOps, and Security teams to ensure cloud services are deployed securely and consistently.

The role focuses on securing IAM, networking, workloads, data, containers, and APIs across AWS, Azure, and GCP, with IaC and policy-as-code guardrails, and CI/CD integration. Strong collaboration and communication are essential.